Privacy policy
Last updated: October 2026 · This is a translation; in case of discrepancies the German version prevails.
1. Controller
The controller responsible for data processing on this website (esim33.de) within the meaning of the General Data Protection Regulation (GDPR) is:
TEFONIX UG
Oberdörferstrasse 23
53804 Much, Germany
Phone: +49 2247 90 64 00
Email: ticket@tefonix.de
2. Overview
We only process personal data to the extent necessary to operate this website, to sell and provide eSIM data plans and to communicate with you. We do not use analytics or advertising tracking tools and we do not sell data.
3. Visiting the website (server log files)
When you visit the website, technically necessary data is processed: IP address, date and time, requested page, amount of data transferred, referrer URL, browser type and operating system. This is used to deliver the website and to ensure stability and security (e.g. defending against attacks).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Log data is deleted after a short period unless it is needed to investigate a security incident.
4. Countries, plans and voucher check
The countries and data plans shown are loaded from our own interface (api.tele33.de). If you enter a voucher or partner code, it is sent to this interface for validation. For technical reasons your IP address is processed as well.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) and Art. 6(1)(f) GDPR.
5. Ordering an eSIM
For an order we process the selected data plan, your email address, any voucher or partner code used, the details entered during checkout (name, billing address, email address, phone number if provided) and the payment status. We need this data to provide the eSIM, show you the QR code and send it by email, issue an invoice and handle support requests.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (statutory retention obligations). Invoice and accounting data is kept for up to ten years in accordance with German commercial and tax law (§ 147 AO, § 257 HGB); other order data is deleted as soon as it is no longer required.
6. Payment processing via Stripe
Payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland ("Stripe"). When you click "Order" you are redirected to Stripe's checkout page, where you enter your payment details (e.g. credit card, Klarna, iDEAL, EPS, Bancontact, Przelewy24 or Link) directly with Stripe. We do not receive full card or account details, only the information required for the order and the payment status.
Stripe also processes data for fraud prevention and may transfer data to Stripe, Inc. in the USA on the basis of an adequacy decision of the European Commission (EU-U.S. Data Privacy Framework) or EU standard contractual clauses. More information: stripe.com/privacy.
Legal basis: Art. 6(1)(b) GDPR.
7. Provision of the eSIM
When you use the eSIM abroad, the respective mobile network operators process technically necessary connection data under their own responsibility.
Legal basis: Art. 6(1)(b) GDPR.
8. Contact by email or phone
If you contact us, we process the information you provide (e.g. name, email address, phone number, content of your request) to handle your request. Legal basis: Art. 6(1)(b) GDPR if the request relates to a contract, otherwise Art. 6(1)(f) GDPR. We delete the data once the request has been fully handled and no retention obligations apply.
9. Cookies and local storage
We only use a few storage techniques that are necessary for the functions you request:
- fw (cookie, lifetime approx. 180 days): stores a voucher or partner code when you arrive via a partner link or enter a code, so that the discount can be applied to your order and the order can be attributed to the partner.
- esim33.lang (your browser's local storage, until deleted): stores your language selection.
Legal basis: § 25(2) no. 2 TDDDG (strictly necessary for the service you requested) and Art. 6(1)(b) and (f) GDPR. You can delete cookies and local data in your browser at any time.
10. Country flags
To display country flags in the shop, image files are loaded from the service flagcdn.com. In the process your IP address is transmitted to the operator of this service. Legal basis: Art. 6(1)(f) GDPR (clear and appealing presentation).
11. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You may withdraw any consent given at any time with effect for the future (Art. 7(3)). Simply contact ticket@tefonix.de.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
12. Obligation to provide data
An email address, billing details and payment data are required for an order. Without them we cannot provide an eSIM. There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.
13. Data security
The website is delivered exclusively via encrypted HTTPS (TLS). We take technical and organisational measures to protect your data against loss and unauthorised access.
14. Changes
We update this privacy policy when our services or the legal situation change. The version published here applies.